Infrastructure & Security Engineer II

Infrastructure & Security Engineer II

ABOUT SCHUPAN

We have been building sustainable material solutions since 1968. At Schupan you will find a people-first culture opportunities to grow and competitive pay all while being part of a team working toward a more resourceful future.

OUR CORE VALUES

Integrity Compassion Empowerment Sustainability

WHAT YOU WILL ACHIEVE

As our Infrastructure & Security Engineer II you will own the health security and evolution of Schupans Microsoft-based infrastructure across on-premises and cloud environments. Reporting to the VP of Strategy & Technology you will be the hands-on engineer behind our servers identity and Microsoft 365 / Azure estate and you will put commercial and open-source AI-enabled security tools to work including automated penetration testing and vulnerability discovery to find and fix weaknesses across a multi-site enterprise faster than manual methods allow.

HOW YOU WILL DO IT

• Administer and harden Microsoft 365 Microsoft Entra ID Exchange Online Intune and Azure including identity governance Conditional Access RBAC and least-privilege access.
• Manage Windows Server Active Directory Group Policy DNS/DHCP and virtualization (VMware vSphere/ESXi Citrix DaaS) across hybrid on-premises and cloud environments.
• Plan and execute server tenant mailbox file and data migrations with minimal business disruption including cutover planning validation and rollback.
• Use AI-enabled commercial and open-source tools to run automated penetration testing vulnerability scanning and attack-surface discovery across servers endpoints cloud resources and identity and drive the findings through to remediation.
• Build continuous security monitoring alerting and reporting using existing tools (e.g. Microsoft Defender Sentinel Purview) and automate routine administration compliance checks and remediation with PowerShell Microsoft Graph and AI-assisted workflows with appropriate human review and controls.
• Lead vulnerability management secure configuration baselines endpoint protection and patching across servers workstations and cloud resources.
• Support incident detection response and post-incident root cause analysis and turn findings into lasting preventive controls.
• Produce clear recurring security posture and risk reporting for IT leadership and executive stakeholders.
• Evaluate emerging AI and security tools recommend adoption and set guardrails for responsible secure use of AI in IT operations.
• Maintain accurate documentation runbooks system inventories and architecture diagrams.
• Serve as a senior technical escalation point and mentor other IT team members.
• Travel regularly between Schupans Michigan sites for on-site work projects incidents and meetings.
• Perform other duties as assigned by the VP of Strategy & Technology.

WHAT WE NEED FROM YOU

Basic requirements:

• 5 years of progressive experience in enterprise systems administration and infrastructure including hands-on security responsibility.
• Bachelors degree in Computer Information Systems Information Technology Computer Science or a related field preferred; equivalent combinations of education certifications and experience will be considered.
• Expert-level administration of Microsoft 365 Entra ID Exchange Online Intune and Azure in a hybrid environment.
• Deep experience with Windows Server Active Directory Group Policy DNS DHCP TCP/IP and VMware vSphere/ESXi; Citrix DaaS experience a plus.
• Proven track record leading complex server tenant and data migrations end to end.
• Practical experience using AI-enabled security tools to improve enterprise security such as automated penetration testing vulnerability discovery threat detection or security reporting; building AI models is not required.
• Strong working knowledge of Microsoft security tooling (Defender Sentinel Purview) and cybersecurity principles: identity and access management least privilege vulnerability management logging and monitoring and incident response.
• Advanced PowerShell scripting and automation; experience with Microsoft Graph APIs or Python preferred.
• Relevant certifications preferred such as Microsoft Azure Administrator (AZ-104) Microsoft Security Operations Analyst (SC-200) Microsoft 365 Administrator (MS-102) or Security/CISSP.
• Working knowledge of Databricks administration and user management a plus.
• Ability to communicate technical risks security considerations and recommendations clearly to non-technical and executive audiences.
• Ability to work on site 34 days per week at our Wixom Grand Rapids or Kalamazoo MI locations including at least one full day per week in Kalamazoo.
• Valid drivers license and willingness to drive regularly between Michigan sites including trips of two or more hours each way (e.g. Wixom to Kalamazoo); mileage is reimbursed.

Physical requirements:

• Frequently lift carry and move IT equipment weighing up to 25 pounds and occasionally up to 50 pounds.
• Install maintain and troubleshoot equipment in data centers telecommunications rooms and office environments.
• Prolonged periods of sitting standing and working at a computer workstation.

WHAT YOU CAN EXPECT FROM US

• Pay:$85000$115000/yrannual salary based on experience and qualifications
• Schedule: MondayFriday standard business hours with occasional off hours;
• Hybrid with 34 days per week on site; regular travel between Michigan sites required including at least one full day per week in Kalamazoo (mileage reimbursement policy applies)
• Weekly pay
• 16 days of PTO in your first year
• 401(k) with match starting Day 1
• Medical dental and vision coverage effective the 1st of the month after hire
• HSA with company contribution of up to $1500 FSA and wellness premium discount
• Company-paid life insurance short- and long-term disability parental leave and tuition reimbursement
• Pet insurance healthcare concierge and EAP

This job description describes the general nature and level of work expected. Additional duties may be assigned as needed.

OUR COMMITMENT TO INCLUSION & BELONGING

Schupan is committed to working with the broadest talent pool possible. We believe diverse perspectives foster innovation and engagement and allow us to attract creative people and develop the best solutions for a more resourceful future. All qualified individuals are encouraged to apply.

We are also committed to an inclusive application and interview process. If you are a candidate with a disability and require a reasonable accommodation to submit an application please contact Human Resources at . Please include your full name the role youre applying for and the accommodation needed to assist you with the recruiting process. We ask that you only reach out if your disability prevents you from completing our online application.

Schupan is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin disability veteran status or any other characteristic protected by applicable law.

#LI-HS1